MCSE 03 Windows Server 2003 13 Theory

8/6/2019 MCSE 03 Windows Server 2003 13 Theory

1/37

ADVANTAGE PRO Chennais Premier Networking Training Centre

Maintaining Software By Using

Software Update Services


2/37


Contents

Software Update Services Installing and Configuring Software Update Services

Managing a Software Update Services Infrastructure


3/37



By using Software Update Services, administrator canperform these tasks automatically

Windows Update

Automatic Updates



4/37


Windows Update

What are Updates? Security fixes, critical updates, and critical drivers

Resolve known security vulnerabilities and stability

issues

Updates Microsoft Windows operating systems,

software, and device rivers

.


5/37


Update Categories

Critical updates

Security fixes and other important updates to keep

computers current and network secure

Recommended Downloads

Latest Windows and Microsoft Internet Explorer

service packs and other important updates

Windows Tools

Utilities and other tools that are provide to enhanceperformance, facilitate upgrades, and ease the burden

on systems administrators


6/37


Update Categories (Contd)

Internet and Multimedia Updates Latest Internet Explorer releases, upgrades to

Microsoft Windows Media player and more

Additional Windows Downloads

Updates for desktop settings and other Windows

features

Multilanguage Features

Menus and dialog boxes, language support and Inputmethod Editors for a variety of languages


7/37


Automatic Updates

Automatic Updates client software can downloadpackages from the public Windows Update site or a

server running Software Update Services

Enables you to specify how and when you want to

update Windows After download is complete, an icon appears with a

message, updates are ready to be installed


8/37


Automatic Updates Client Deployment

Automatic Updates can be installed on your clientcomputers by using one of the following.

Install Automatic Updates client by using the

Windows Installer package (.msi file)

Install Windows 2000 Service Pack3 (SP3)

Install Windows XP SP1

Install Windows Server 2003


9/37


Comparison of Windows Update and Automatic

Updates

Windows UpdateMicrosoft Web site where Windows users can

download critical and non-critical software

Automatic Updates

With Software Update Services, automatically

interacts with Windows Update.


10/37



Software that downloads all critical updates andsecurity patches to servers and clients as soon as they

are posted to the Windows Update Web Site.

ServerComponent

You install the server component of Software Update Services on a serverrunning Windows 2000 Server, XP or 2003 server inside your corporate

firewall.

A Corporate services allows your internal server to synchronize content

with the Windows Update Web site whenever critical updates for Windows

are available.

The synchronization can be automatic or the administrator can perform it

manually


11/37



Client

Component You can control which server each client computer connects to and then

schedule when the client performs all installations of critical updates either

manually by means of the registry or by using Group Policy from the

Active Directory directory service

Synchronizes content from Windows Update You can configure servers running Software Update Services to

synchronize content from the Windows Update Web site.

You can also configure thee servers to download content from a content

distribution point that you create manually.

Second-tier servers running Software Update Services can synchronizeboth content and the list of approved packages.

By using this method, you can simplify the update management process by

managing updates from a central location.


12/37



Deployment of Staged Updates You can stage update deployment by using multiple servers runningSoftware Update Services

You can set up one server in your test lab to publish the updates to lab

client computers first

If these updates are installed correctly on thee computers, you can thenconfigure your other servers running Software Update Services to publish

their updates to the rest of your organization.


13/37


Software Update Services Process

Server-side Process The server running Software Update Services runs a

scheduled synchronization with Windows Update and

receives new packages of updates

The system administrator reviews the new packagesand determines whether testing is required.

-- If testing is required, the administrator sends the new packages to be

tested.

-- If testing is not required, the administrator proceeds to step 3

Administrator approves the new packages of updates


14/37



Client-side Process

Automatic Updates on client computers check the

server running software update services sever daily

and download new approved updates packages from

either the server running software update services orthe Windows Update Web site.

At the scheduled update time, software update

services checks whether the administrator is logged

on-- If logged on, the administrator sees a status balloon on the desktop and

decides whether to defer or run the installation

-- If the administrator is not logged on, step 6 is performed


15/37



The scheduled installation job begins, and AutomaticUpdates installs new or changed packages.

Automatic Updates checks whether the new packages

require a restart of the server or client

-- If a restart is required, the system restarts after all the packages areinstalled.

-- If no restart is required, the installation in completed

Automatic Updates waits for the next scheduled

check.


16/37


Software Update Services Server Distribution

Points

An automatic content distribution point is created onthe server during installation of software update

services

A server with manual content distribution point does

not require software update services


17/37


Content Distribution Points

Automatic When you install Software Update Services on a server, an automaticcontent distribution point is created on that serer.

When the server is synchronized, its content is updated from the Windows

Update Web site.

The content distribution point is located on the web site in a virtual root (v-root) named/content on the server running IIS.

If you choose to maintain content on Microsoft.com, this automatic content

distribution point is empty

Manual You can also manually create a content distribution point on a server

running IIS version 5.o or later.

The server with the manual content distribution point does not require

Software Update Services.


18/37


Manual Content Distribution Point

Manually configures content distribution point in any ofthe following situation:

Multiple servers in your organization are running

software update services and you do not want all of

the servers to access the Internet to synchronizecontent.

Some sites on your network o not have Internet

access.

You want to test content in a test environment and

then push the tested content to your production

environment.


19/37


Server Requirements for Software Update

Services

Hardware requirements Pentium III 700 MHZ or higher 512 MB of RAM

6 GB of Hard disk space for setup and security packages

Software requirements Windows 2000 Server with Service pack 2 or higher or Windows 2003

IIS 5.0 or higher

Internet Explorer 6.0 or later

Server requirements

Software Update Services software must be installed on an

NTFS partition.


20/37


Install and Configure Software Update

Procedure

Download software update services from

http://www.microsoft.com/windows2000/windowsupdate/sus/default.asp

Double-click the SUS101SP1.exe file to begin the

installation process. In the Setup Wizard, on the Welcome page, click

Next

Read and accept the End user License Agreement

Select the Typical check box Click Install, and then click Finish in the setup wizard

to open the software updates services administrationweb site in IE.


21/37


Automatic Updates Configuration

There are serveral options in Automatic Updates tocontrol

Automatic Updates settings The administrator is notified before updates are downloadses and before the

download updates are installed

Updates are automaticaly downloaded, and an administrator is notified

before updates are installed.

Updates are automatically downloaded and installed based upon a specified

schedule


22/37


Configure Automatic UpdatesProcdure

On the start menu, point Administrative tools, andcolck Group Policy Management

In the Group Policy Management window, expandGroup Policy Management ,expandForest:nwtraders.msft, expand Domains, expandnwtraders.msft, expand locations and then clickLondon

Right-click London, and then clickCreate and link aGPO here

Right-click London SUS Automatic Updates, andclick Edit


23/37


Procedure(contd..) Under ComputerConfiguration, expand

Administrative Templates, expand WindowsComponents, and then click Windows Update

In the details pane, double-clickConfigure AutomaticUpdates

In the configure Automatic Updates Properties dialogbox, clicl enabled and then click Next setting

In the specify intranet Mictosoft update servicelocation Properties dialog box, click Enabled

In the Set the intranet update service for detectingupdates box, type http://ComputerName (whereComputerName is the name of your computer).


24/37


Procedure(contd..)

In the Set the intranet statistics server box, typehttp://ComputerName (where ComputerName is the

name of your computer) and then click OK

Close the Group Policy Object Editor dialog box, and

then close the Group Policy Management window


25/37


Testing content for Software Update Services

Set up a test server running Software Update Services

Connect a test client computer that complies with the

baseline configuration of your corporate desktops

Install the update, then test all corporate applications

Approve Software Update Services to distribute theUpdate to the clients


26/37


Use Software Update Services Web site for:

Synchronizing and approving content

Remote administration

Configuring Software Update Services options

Monitoring server Status and Logs


27/37


Synchronization Works

Automatic Synchronization If a Software update service is confiured, the system administrator can

review the updates on the software update services web sites.

After reviewing the updates, the system administrator can decide whether

to approve the updates

After the updates are approved, they are updated at the next scheduled.Manual Synchronization If a server is configures for Software update services, but requires a

systems administrator to manullay synchronize the updates.

The updates remain on the Windows update Web site until administrator

reviews and appeove them.


28/37


Synchronize Software Update Services

Procedure for Synchronizing On the Software update services adminstration Web site, in the navigation

bar, click Synchronize server

Click Synchronize Now

You are notified when the synchronization is complete.

Procedure forC

onfiguringC

ontent SourceOn the software Update Services Web site, click Set options page. To synchronize content from servers using Windows Update Web site,

under Select which server to synchronize content from, click Synchronizedirectly from the Microsoft Windows Update servers.

To syschronize content from another server running Software update

services or amanullay configured content distribution point, under Selectwhich server to synchronize content from, click synchronize from a localsoftware update services serve. In the text box, enter the name of the serverfrom which to synchronize.


29/37


Software Update Services Logs

The Synchronization and approval logs are two logs that

the administrator uses to approve updates

Located in an administrator-accessible folder on the

server

A web page is provided to view status of updates Automatic Updates client polls the server running

Softwae Update Services for new approved updates

to install


30/37


Synchronization Log

Keeps track of content synchronizations that have

been performed

Contains the follwing information:-- Time of last synchronization

-- Success and Failure notification information

-- Time of the next synchronization if scheduled

-- Update package that have been downloaded and/or update since the

last synchronization

-- Failed update packages

-- Manual or Automatic synchronization

Log can be accessed from the navigation pane in the

administrative user interface.


31/37


Approval Log

Keeps track of the content that has been approved or

not approved

Contains the following information:-- Record of each time the list of approved packages was changed

-- List of changed items

-- New list of approved items

-- Recors of who made the change: server administrator or the

synchronization service

Log can be accessed from the navigation pane in the

administrative user interface


32/37


Review and Approve Software Update

Services Logs

Procedure for viewing Logs

On the Software Updates Services Administrator

page, click View Synchronization Log or View

Approval Log

Procedure for approving updates On software update services administrator page, click

Approve updates.

If approved, the updates are installed.


33/37


Back Up and Restore for Software Updates

Web site directory where the administrator site was

created

Software update services directory that contains

content

IIS metabase that stores all of the configurationsettings for IIS

-- Similar to the registry which stores all of the

configuration settings for Windows Server 2003.


34/37


Backing up Software Update Services

Procedure

In the run dialog box, type ntbackup and then click

OK

On the Welcome to Backup or Restore wizard page,

click Advanced Mode. In the Backup Utility-[untilited] window, click the

Backup tab.

Expand Local Disk (c:) and then select the Inetpub

check box.

Expand Windows, expand system32, expand inetsrv,

and then select the MetaBack check box.


35/37


Procedure(contd..)

In the Backup media or file name box, specify the

name of the backup file, and click Start Backup

In the Backup Job Information dialog box, click Start

Backup.

When the back up is complete, clickClose.


36/37


Restoring Software Update Services

Uninstall Software Update Services and IIS

Physically disconnect the server from the network

Reinstall Software Update Services and IIS

Restore the backup file by using ntbackup

Reconnect the server to the network.


37/37


Thank u.

MCSE 03 Windows Server 2003 13 Theory

Documents

Transcript of MCSE 03 Windows Server 2003 13 Theory